Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
File: AyhzUYaXwj6cPjemRrrRISNa10Q.mft (raw, json)
Hash identifier: TcS0yW7rWaEvXGd5pVl/FOnFbyoqDxsnVV4RyaD9SPQ=
Subject key identifier: F3:55:F4:5C:07:6A:CF:5F:55:C0:92:EE:AB:DC:39:1F:F3:AE:2E:BF
Authority key identifier: 03:28:73:51:86:97:C2:3E:9C:3E:37:A6:46:BA:D1:21:23:5A:D7:44
Certificate issuer: /CN=032873518697c23e9c3e37a646bad121235ad744
Certificate serial: 01A15A424314311760106EC26B8B822DAD75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
Manifest number: 1AB6
Signing time: Tue 20 Oct 2026 17:00:54 +0000
Manifest this update: Tue 20 Oct 2026 17:00:54 +0000
Manifest next update: Wed 21 Oct 2026 17:00:54 +0000
Files and hashes: 1: AyhzUYaXwj6cPjemRrrRISNa10Q.crl (hash: hovyZ/B6p4G+CVUXwQviGxxhxrI6XGB4qpmhG74Mzrs=)
2: NUMsW2fdf3SjrYGEQTRkZNhTS7A.roa (hash: NIqv3PrQsgpG1/zoYtC/m+nGNGEajaJy1aijMy9aHTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:42:43:14:31:17:60:10:6e:c2:6b:8b:82:2d:ad:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032873518697c23e9c3e37a646bad121235ad744
Validity
Not Before: Oct 20 17:00:54 2026 GMT
Not After : Oct 21 17:00:54 2026 GMT
Subject: CN=f355f45c076acf5f55c092eeabdc391ff3ae2ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:77:21:b3:f5:7c:61:37:10:8d:75:44:b5:e3:
e0:4b:cb:c3:88:e4:77:64:e8:ea:52:9b:25:9a:6a:
4b:31:ca:09:22:45:31:bb:de:d4:26:32:b8:ce:d8:
0f:81:f9:e6:99:24:84:84:8f:ba:a1:27:3e:8f:48:
7e:c4:8b:dc:c9:0f:ba:35:22:7e:2a:c2:33:85:fe:
cb:57:da:4f:bc:a0:e4:86:a3:ec:a7:b2:ec:3f:f9:
ec:b6:9c:18:41:97:c7:68:9c:16:c3:42:db:b4:f4:
bc:d7:3b:df:fe:4a:6d:cb:20:92:67:50:ea:51:00:
a1:98:13:a2:8a:c8:bd:fa:bf:dc:98:2c:73:10:ad:
b0:d5:57:31:09:7c:c5:61:d7:07:d7:2c:5f:cf:ca:
ed:38:d9:d0:ec:d1:9e:f9:9b:14:ca:96:36:97:e5:
b9:7b:97:87:8e:f1:3d:32:64:11:1c:c1:60:ab:d1:
3d:4a:cf:6b:a2:ad:82:62:6a:e5:ae:89:36:e8:7f:
c3:3a:93:71:c0:0b:10:ba:be:70:76:13:46:56:85:
db:ce:da:86:9f:33:42:47:d8:0a:35:d9:13:0e:bc:
8a:af:63:4d:fa:19:6c:6f:ca:8f:cc:43:4a:9c:bb:
76:87:44:f7:06:84:81:92:18:f3:98:d2:c4:2c:d2:
c0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:55:F4:5C:07:6A:CF:5F:55:C0:92:EE:AB:DC:39:1F:F3:AE:2E:BF
X509v3 Authority Key Identifier:
keyid:03:28:73:51:86:97:C2:3E:9C:3E:37:A6:46:BA:D1:21:23:5A:D7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:dd:9c:a9:a3:b6:9c:22:fc:d9:fb:c8:b8:3e:ee:70:62:c4:
de:cb:82:98:ee:01:c3:89:3d:43:4e:67:71:d7:98:c2:0a:e7:
c7:d5:8e:bc:5b:1f:2c:f1:e0:06:b9:20:d0:cd:9e:68:1e:69:
7d:c4:92:77:e8:90:0b:99:c5:4c:a0:4d:60:b8:f5:e4:85:6c:
f5:12:8e:e4:63:e6:be:a7:34:7c:13:03:99:26:01:54:6c:d5:
16:9c:40:f7:a6:83:e5:1d:2b:ec:f7:41:28:ca:2f:1d:e8:c1:
6f:e9:dc:1f:a3:e5:7d:68:5c:f2:5b:08:01:56:8d:e0:90:35:
b6:a2:85:d2:9e:c4:c9:11:f6:15:d5:c1:75:f8:d4:4a:44:01:
13:ba:a5:5c:81:75:ac:4b:f3:e9:31:e6:bd:6d:c0:ef:c9:e8:
4b:ad:5c:14:ad:84:5b:23:8e:f8:a2:07:dc:3a:27:c0:2d:36:
35:60:7e:06:d3:9b:7b:f3:c1:cb:2d:53:95:6f:86:39:fe:54:
4e:98:fa:74:39:09:aa:e0:37:5a:7e:ab:89:39:67:af:96:12:
46:fc:d3:ea:d7:19:37:52:fa:ce:fd:2b:18:0a:6e:a9:63:6c:
d3:15:51:06:4f:6a:11:7a:aa:74:cf:29:9d:bc:65:41:e7:40:
1d:5a:ac:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 02:08:52 2026 by rpki-client